Analysis
- max time kernel
149s - max time network
126s - platform
windows10-2004_x64 - resource
win10v2004-20260911-en - resource tags
arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
02/11/2026, 16:22
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-11-01_82947a47782e588a26488afb1e17c750_coinminer_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe
Resource
win10v2004-20260911-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-11-01_82947a47782e588a26488afb1e17c750_coinminer_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe
Resource
win11ltsc2024-20260911-en
1 signatures
150 seconds
General
- Target 2026-11-01_82947a47782e588a26488afb1e17c750_coinminer_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe
- Size 9.2MB
- Sample261102-tvd9hsff46
- SHA256 de6c60bdfb9c9bee2278a92a93cdb98cf65c11771a88261fdba94596a2f401b8
- MD5 82947a47782e588a26488afb1e17c750
- SHA1 40a439560e6f85118ab9c32321a103006339b4c0
- SHA512 0d6d608b8c10cc77fffbfe7eda3a95a7caa048c069ca8333e023bff89431b96417b887f4ccd7daceac90557a0ed9bfd301239c0267ca2d0899ba1df9eb6d17b6
- SSDEEP 49152:drFgISHqAI3qD75/Ep2hyD8bX55+UW1cIPPL64VfZLChuvWe1n6CNoE:dZ8bJ5+UW1chunR3
- TLSH T140A64A13FE9101A8D059FA39C5675236BA617888D73173FB2E50AA342F737D19EB8B40
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Reads the TCP/IP host and domain name from the registry 1 TTPs 2 IoCs
The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.
description ioc Process Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname 2026-11-01_82947a47782e588a26488afb1e17c750_coinminer_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain 2026-11-01_82947a47782e588a26488afb1e17c750_coinminer_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-11-01_82947a47782e588a26488afb1e17c750_coinminer_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe"C:\Users\Admin\AppData\Local\Temp\2026-11-01_82947a47782e588a26488afb1e17c750_coinminer_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe"1⤵
- Reads the TCP/IP host and domain name from the registry
PID:4648